Analysis Date2014-09-16 19:32:38
MD5199944c09465454e21dcdbc7a6881e8c
SHA141055fe57d9843c7cf06497cde5be3415c3615ee

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
Section.text md5: 9b9210437a1a84bba4f3c1d9e2919204 sha1: a3ede6bcbdfb93b4e3ca1a8e224bf7a902b02e34 size: 79360
Section.reloc md5: d7797d24c4be60c01056dc3dd32c038f sha1: 2e1a89244d45efaad5a7828ae699f846cc5d7337 size: 512
Section.rsrc md5: e117d651b9dc5dcfeed7e7d91d569bcb sha1: a76da7dfb2aeebbf4075699cc5ce8c5fc42d4f4e size: 9216
Timestamp2014-03-02 11:51:41
Pdb pathC:\WebServers\home\pirogi.ru\test\podmena\Downloader\WindowsApplication17\obj\x86\Release\WinRAR.pdb
VersionLegalCopyright:
Assembly Version: 1.1.2.4
InternalName: WinRAR.exe
FileVersion: 1.1.2.4
ProductVersion: 1.1.2.4
FileDescription:
OriginalFilename: WinRAR.exe
PackerMicrosoft Visual C# v7.0 / Basic .NET
PEhash9eacf4834a72a483b622c5d7020156899e65d904
IMPhashf34d5f2d4577ed6d9ceec516c1f5a744

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath ➝
C:\Documents and Settings\Administrator\Local Settings\Application Data\\x00
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

Network Details:


Raw Pcap

Strings
.3
8.88..8..8..
8888888888888888888

000004b0
1.1.2.4
"3D9B94A98B-76A8-4810-B1A0-4BE7C4F9C98DA2#
Assembly Version
dynamic method does not support fault clause
_Encrypted$
FileDescription
FileVersion
InternalName
LegalCopyright
OriginalFilename
ProductVersion
publickeytoken=
PublicKeyToken=
StringFileInfo
Translation
unexpected OperandType 
V2luUkFSJA==
V2luUkFSJQ==
V2luUkFSKg==
VarFileInfo
VS_VERSION_INFO
WinRAR.exe
        -->
        />
11.0.0.0
1.1.2.4
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
4System.Web.Services.Protocols.SoapHttpClientProtocol
8.0.0.0
A.c58561d77e8813f77261c5e0aa2092666.resources
Activator
AddArgument
add_Load
      <!-- A list of all Windows versions that this application is designed to work with. 
aP>}~)
AppDomain
    </application>
    <application>
Application
ApplicationSettingsBase
AppWinStyle
ArgumentException
</asmv1:assembly>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
Assembly
AssemblyCompanyAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
      <assemblyIdentity
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
AssemblyInfoAttribute
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
AsyncCallback
Attribute
AutoScaleMode
BadImageFormatException
BeginInvoke
BinaryReader
BindingFlags
BitConverter
BlockCopy
Boolean
B.rsrc
Buffer
c00d2eb34fc72871877892d088232df75
c0122ef42bc9b2c2e0b1e0bfad077770f
c01faee4f317dcc160493b53381bcfa65
c0368906d97b4f5e665da35f34348cec8
c03947a575bec61136f083d8c1b5ffb10
c040f85fd39fae02c2a149622bd1770ad
c047b384aeabc30c020db5f93448b0659
c057725966ef3cf2bb079cfe615cba536
c0591692fcf64d2596bfba597ebbe6de8
c0685eb46072e18d82235127960977825
c07a37ad64d02e31081442d14cdd67bd0
c082a0df75b56c87785ede2832dc93b70
c0873604f71ea53b3bbee4f090910444f
c0978fccf45e5e7aafd1190368714e77a
c099cd78f33b44cff0fa7f65a79352a96
c09b441aebe0cc86abd6a472083c1cb33
c0a4526f42bdb81d67a8a9c35ca27cc84
c0a4a71428db82c44114636f65e1b131a
c0c09f8815085447584ce6d50a36c5cf2
c0c49e68cca5ee2091e89c58145578994
c0caebeacef7c2260911307675de6c573
c0d7a2b997e1f259b4a49421df1477e99
c0d86fadd43ddec84fce631fa90604ce1
c0ea4d601e2c310474b210eed28b73859
c0f45cab58ae19188ec78974fd2009f09
c0f58ffae9051e63eb4946ddfef759e89
c0f8779cf288961a126cf623da9fe2e91
c0ff0ba19c1790b3c0bf76b0540a653b3
c1012c208ea1343ffa38a67945af1a0b3
c106e6061ebd4e2f2509ecd6b05291c2e
c10b4b7d5b305d4deef9e915d07cadabf
c114030d9f1fb598b1f6e2692423d568a
c1153c42649d096d11ecb40852d3782fd
c11faacfa34953c7581af42e3803c693f
c13b5c924a4a4f2d3171e78a6c886fc0c
c145b71f2e3b42d593d213e420cbc6d66
c145bcb707e90755ef598ed4aa042dbe1
c1525771f3a5c5399a610b991c97b6c6b
c159adc215e7a826563fe093e54730462
c15b72e419a46fbfba4e1a65bef4beca5
c16683dbdc24ee7dbf3a75088a2d3ddcb
c178d00a3e7ddbb0bea10dbfbed857f48
c17acceeb97718d342847ddbd01899200
c17bc6f86c33604dbbc013cd6e37e4813
c1874872b5a7f8282a6197867daf3da68
c18ac138135f4d48b33066d815356a655
c1a73a090f6cb940d3cd63e75f619779d
c1b94f50a4dd08e4e35dce633197a0f6d
c1be99857b4c332454384b06b173e7368
c1c2baf1862666185ef60f1f95c489fd5
c1d264df0fbe647e07fd98b7263e7e0c6
c1dc57fdb4e15bdeb3e7bb630e7f2ede2
c1e3d93d288eb25acbcc47ae2edec8de9
c1e65a8f0bc1d1a39b2b72b9f4b53c86c
c1e928aad35ce8f0df9e369f496a6f099
c1f0d3eb15417154d6f026c2f10c2ba05
c1f15ce7afec79b200a00e0952bbb50be
c1f98007f6c7613fbc0ea25f1a63c12b9
c2007f25bfb7afdf9cc4812644efff185
c20bf1e8bd585abb2d8e94ddd7552f1db
c21245f9b98cce9e17ed02ec91bc51d89
c21599c79107bce631ced084fb7d945d6
c21f1cc54759351586a18209406c68ef6
c2227385e7273eb94d0ad910a586ae8f3
c22c4a7405a96832d15b8e3dc9893433f
c23adc8fe7eec3c3d5221fbac48990cb2
c23e48e57a5818af875fae7c36491588d
c2637a4487916b8d7e0f2bbed3a601abe
c26ddfc600ff94ce3b3eede786e523088
c272fd88fdc41cc4b5c13f18d3bdc30a5
c291352c383fdc2c079470010e1605138
c29e4baebd5e84dda83712086975949e4
c29ed18c036515ff10cb840526653436e
c2c1f2dbd95f72c0d36f4de7de224e5b1
c2cfe7469e341fbb29637081cb0dd25ab
c2d37a0c582bda71d037429ad4c335b3e
c2d42db002bed799fec05f3af0ffa0968
c2dfeb7a3d22ec91bff559e9389025238
c2f07e016a77b184f3b9db46c803acf06
c2f0febb908e66147eb9108e6947127f3
c2f8a69c992f3ea3bc4a3900f5fc898f8
c2fb4a2f962e75fb4af01cacfb5f9ce8d
c313e3d9a0fc45ff9e226be6c23472107
c32a98848aacbe6f30c27fc70aa4f9289
c3310e3ad06a0fe1abb6367849858bb6f
c3364a3b8cfa52013fbc764e0e40e692e
c33b3c9ad526f436e1cc1c37c6ab1771a
c33d9c26d2173a10c0a760a9c70153def`1
c3410b1034fd703e5211d619665b8bfbc
c342c6bcdf4e96c16e9e9c50e6e3a5d1f
c34a6d6667c10789e56f2fe2d0f8ef82f
c353e6e52f5dbd65055960f50d2f40ddb
c3604382b8c6479693574eb78197b9fdf
c362e8762bf98da77bda345dc1578d5f9
c374a01f2d25b613a61dfce070bfa9c06
c378a35f608fe59cc3a2ff71575912080
c37dfb47464d6b8747d157489e7eb84af
c38690600a8c74d19f501d563eada991b
c3974c4de86ad6794a5007d638ef4b911
c39f780bad6b4123c7ad9f2c6562ed6b3
c3b8a24a8b1c73c54b97b9edb6a6ddc15
c3cac1699b686e777dbd7f33edaef1d78
c3e43f1dcf933cd70797fb57d5de44ed3
c3e60f2f5c1b7c576935e075d04555775
c3fcadba8b53e4b8df402868bea2409f8
c3fde386c3180d80121a8e20c7248cea6
c404537e12b314ba3b314f33d83454f2f
c4107d9714e737cafdb6b1a18ad896059
c415f5be012855067b24ffad5e0377603
c4163bf3644273d1d78f389856ef7d5f8
c41d1b0bc81f822975b68a490410f5b46
c42e30a0f6afd73cf6bcd384c9b979b8c
c42ff53c3b504583f7473bb405f5fe7ee
c437a3ec74c2a35c441467d930015c032
c439d859af45ce76d9b7f346ea6817af1
c4407d704c60668f8b94521bfa928f28f
c442223ec5ddaddd5f0ffeffbe51fcf9c
c4497b8d1b5059544ab84bf39f991113a
c44c7684f40d1340e6524a80fffe56908
c45242de316a37c4e6637315cc75b713c
c45d87dad1a503bd0504b69165eb0d8a5
c460f911275e81449696d7d2d9ddca5eb
c470607610a2d2a81d34bcc22e6ca6ac2
c47433c98bca66ddec7360e59cd3c6516
c483b515b5be3efb180d86be91a0ff63b
c486343d8a71115b3e61d5ba91436b9c9
c4994a1f1d0083b21bd1693d60504b707
c4a2936fdbcad338aea7853b193097b7b
c4d62be50ad90f51bc1ecb95185d676f9
c4dc40ae0cfb2b492386bc896b005cf46
c4ec63d91a400a0a3065c95ae529882c7
c4ffea448509050b61912951de0a16cae
c513f70dae695e11770a5fe52f7035b0c
c5178ea1bbb20a9419b4c4559ce2c03a3
c51eb2c45b9fbbb22cab01fe73d1708da
c53039612a09309e6d322b20c3adbbdd6
c537a057b25096ecbb30d367e3ee82c48
c53dfdc7ad0e9b58c6b623cf3048ac996
c54331826c883aaf4ece9f71605fe5105
c546ec68f75f528a9bf23686b375a7703
c55d1f01cf1a648ca64a6c26ecf5c85c6
c567dd0c65e08af0919698dbe0aab7576
c58561d77e8813f77261c5e0aa2092666
c586b7b91b84c366431cedb47db2299f6
c58da559d4bdd36ae96f3926b523d1167
c5b78cfaaf4be031d85ca7908a4eefdce
c5c15426bc9d374e46c144e5dde09e6f7
c5c76b46f836fca0dcfaba66d84d38893
c5d7faf4a1a657731ea7152c5beb973d4
c5d976ab372e7d0f336f13ab9ba749bac
c5e08f69255267f6049e19ca8045cc88d
c5e0c487dfa4d9c5a462b9883bfab241e
c5e2c24a264023342bb611ac4c67bc870
c5e94a771a351d5a5b88a4e5793208b6a
c5ec59659931bad49fc220cd141477066
c5f5abc9355eea957ed41a1616ddfe21d
c6043fafbb4d3cdc3a0bea60e099f2cc0
c61854ab2ae31f6134374af23a498ac39
c619e151797cd3ecbc4aa04d6b77ed62f
c6216fa0bc218663c6cc42c6dc1d1176e
c6538bff2c168c5978a881369f3a93cf5
c66233be36f613a59d50f075b6f924dcb
c66304aa17365ec87ca6c65872564363e
c69123ea2d7e9fc8345911e532c86813c
c692703e79e01d7a8df1ca9a1b3db164c
c694113818e1517237039884d34029d2f
c6952de3f691587ee70f52ae9c9a9fe3d
c6a91dea977bae0676adb0117b8f8046d
c6ba66340e3bfc5ff2a552075f1b6f11c
c6bad41b3aca2f1dcbcc7f6539fcd4b7e
c6c8d1b8b35b78a8e7342562d47e25653
c6cdf159630185f37dacdb67e51ec1d59
c6d00eea4261bf756f93783aac90dfb90
c6e516834e5208c78a1e9063a51ee9374
c6e71f8fa1efb67698f7879db21e39f21
c6f1fb2094e8211a552b3d37ca083a77a
c6f3e3bfaba89c6bcbca073b35831de2c
c71063e5643d36d593328f612ce0553f2
c7113df2cb836dcbba1bf3b838255756b
c7183c30cc9203c716a301d0254dbfc9f
c721da35c08c4fe123ba26c68cf119afe
c723f8c5fb43d78ee1ff2b62ab45a0a87
c736d8cf9d48eb8bf612b8025b2b52773
c737d4fb1aaf5f167da4f29e43426ca7d
c73ad6dfe97d66114eeea6de6cdbdfd2a
c743bbf7fb1f0405bf96b6d32eba7f8fc
c74689407f155e7c3ad05ad9ceb602639
c7493db35c189ebd2353573243185ffde
c7496b06d283c431d0805a1643e0e13b1
c74bda8e0914db3b379033ef2e96c4bb1
c75c93996437bda89f9d481b2a367fe0b
c7696a46764c6b264d54a362f7cf720b1
c76cd8a99055cbaf1defd3e5c543e8ea4
c771eee3fabed1797007f2525b0d1bc5c
c7960cca2c71e4dcaef5a99558db435a8
c7ae21f0f43a1a9705fd84685285cc694
c7af5576683c8a17ebc4455bff651e89f
c7b9f38fa9bb47a06402042061fae52ce
c7bca875c0bda314388408ff56e8a66a9
c7bf00c9ae31992af92bc731209c164eb
c7bf835f7c7650bd39a9ccd48d252bef6
c7d6c37812b973009228573e09b328da5
c7e5f67046f1e3cef6c8f7dc93e7549c1
c7eeb49c06336aaf568f9e6e8eae7bf14
c7ef8c977964b14e2ab62541255031683
c7f4d1cc433f942b1c6ad5e91a7631a34
c805204575cccd911d6003b5883ba517e
c818c2715311b901d73423ceb9a9d0e70
c81b06444c4f55f64133ea76cd1a08156
c81f1c239c5335ea31d5e1d2b7d516f71
c81f1d98315f2198cc6a1e46118711be8
c832ba22abb4fa46707cf7f5c7edd03c7
c840b6e187ccff9add134125654f42c2e
c84b8f65c65a974943bfd4b3d85942c94
c85c2d8eba6343da1e61ef2622f897eed
c872256b9733dc174455d5c0c7d6d3c54
c879dd81f84dca95a2ad2668d8fe8b780
c882979633254a547d2c7c3f0ecd4f9de
c8895ace72c3cbbba046f3b184f9225ca
c88985c6ceadf23696b0bd3fc17f106fc
c8984cdebf70c180c5687c8aaa6c82f68
c89e90aad5ca6616074ad5712557ea37e
c8c11b73a19267f9d737df71c01484377
c8c96e9d5e790918a6fcc92067fbc226c
c8cc5a887a5f6afd6c054b088787a9032
c8cc6ed13f69811f788e6620eda84ea9c
c8cdba6756fb48f3789786037fee1dfd6
c8e78710228cf23d75291d215cb029d06
c8eeeaa2b0aa2cba795260e45564ffdec
c8f590744e7811476795c2c928e4423c7
c9013526c964b3866d62c10f898684a26
c91bb86ea5b5e3b5bfb0bd1add4bf1d8c
c92b331d039009348ae38779d84be476f
c93086372fae84080ffc698c209484194
c93bede08c96ffc27d50393e87e446efd
c93cfd6c2a8a4b78083fdc2e54568d3a2
c944763fa6f491dac2e75b258c19851ea
c95cc36f2ff380682494d075a7701e653
c96491f8fc9bf31da452a62fcefa010a4
c9811b69b70cbb43f5ada229dc1cd81dd
c982671a1bf962795e8571088b7bd4fb1
c98ab8abc649ca122ea8265c26d6f59b8
c98c035c5beeab176159f3b0631de2fbb
c992b3a37e0726bd701c1a6322c3cd92d
c995eb63c860027b24e06401aa24629d7
c9a1aa0d4f5d917f77cb541ae5310d6b6
c9a4582202b4e65d10f6f336926b9dc25
c9b0a4d54e3813f73853ea8d1c7adc564
c9b93f6f8c8c9529c608fe9185d38683d
c9cb5d5fd2b434a2388f596c530683a8e
c9ccecac01f0c4a8d9a5d5c91dc0ce70a
c9cd71f8e3394383a8b5eea7bfc0947aa
c9d3702209ac06fa6c1e2cb1cdcfb4d74
c9d70354e943bb8a95509b0b53ae160e6
c9df1f16297925a096a4c48964f5cc303
c9e4b1fe81c5177e2ae947b0cc263ea80
c9e6894765c750fea637fc06c1b75c80e
c9f350a6d4068025dda59bf5a7e022704
ca027182f9b77d418b921511fae135ac3
ca206b185701d55139fc7d89dec37b9b6
ca223b94da3cf3f962748ef1ae7dc6b9a
ca4695074376fee1352b02267ee5b90dd
ca487d4e1af2068aaaae623274e3c19b8
ca4bbdb3f90849f16d3d48cd29e228173
ca5e5605b78c0ffc1ee128451936e04fa
ca6d5ed7f4770ffbc716c2c02678105eb
ca7b4477b9b42b1fa78d5cc5e08e950b5
ca7ba4b1e0625213a8e4699b69645d194
ca83995a0a84ec0058c2174015c7cc0bc
ca8cc86e058cd09cb89df20007f13bc35
ca916c30f7ad1ecac728dfce4ea14d42a
ca91ab649630b886dd3383783ca17f12e
caa9a6ca6ee0c00f4425beb854b0335f7
caac3f9721f5fe3007eb0c1a9167093d3
cab0fd9dabdb242a14c18b3aff7629106
cab257b1c6bc5fcafe91d2223c969b9af
cab31118798b089b099f98a419f26669f
caefd858edf35d60a28cbd2ee3f2debb2
caf6c4bccd6455bdfc0f9ddf5f3f0a4d2
caf74b1c52187278d9bc62687c44ad87c
cafd1d3ca447d3c7905a0ba609b396ae8
callback
Callvirt
cb046aef3e271c8caf501ebb218fbf36b
cb0d93f22f244ce73db61f1e9f7a9f61c
cb1f9c215115e61939691f2aaebdf62dd
cb1fb8c6331c8f047ea963a3d375e1e6e
cb21368b4cce25cf216f649ab84b992df
cb24274d957756d47eac72518e1a598db
cb32502733d9cf646cad9f6793eef26c1
cb32d09273b9c4e50fe9221e6c6c51456
cb481f41dcc1356ebbf679f7d407ea6d5
cb544ffe32366bceee79a0b5733efdfa4
cb6c8b8d60f82cb0fbb364775cf0f8e7a
cb76beeb3ceaa033a9e3557a6744015d0
cb77c3af13e43232eb0b7e1b33b0d5721
cb7a25c0e2989dd42ce0071fd958b6619
cb7bc2e30c7c65a6c892884e8238d59dc
cb8bf225ce06d9576e2353b10ff205f0e
cb8e6eb00e1eccc4e29f576de50f2a78c
cb91d1d80a6dbd79570f6c3cab0dcb1d6
cb950bafaf5fc525b6ccda062fa02267d
cb96bc14ff80405f1ee835e320ba9bc1f
cb973d823f521284c5e2013df7751e1ed
cba30163474738766e838b1efd1111d7b
cbc77815a8b4888a89847764665d0c680
cbde20c0c72c1799200aaf193828bf3a8
cbf2fa0a95a5a69bb042eb29809c1be1a
cbf6d5662a4ad951040b7d232fb374458
cbf9805deb0b68760b86dd853e806c495
cc094018b2bc9d5986b6bc00d7e0999a3
cc1628f15a90d7beaa1cf0530e41a3f82
cc1b33a421a1b101a8f90f041c4b77768
cc255721f4b982a5a003160d4682637c9
cc33c903a6271d4b110535397703fa64b
cc33e7261a38be7f78f5561ea9817bbe1
cc3bc2475d2a7b536b18ba1bac51ec40a
cc410053055ffc996834650a4629f016b
cc642a83bb4b6a0f323015c536c7e3983
cc6e5b56edc4ede70d10f6965a31e8483
cc7b2c755e5ea48a6d1608cb8e706ac2a
cc7f8599e7884c32e96697f431270d363
cc8a490715234943c7333cfd359231ee4
cc98cfc57d081286a4be36e83ed75de1f
cc9eac16f07e3a7c95b6daa610f02b4f5
cca0395dfa1f4b3ae362eb0338203e475
cca676641d95c3b33ca3458e289eb2983
ccb9d58ae90df19a616f90381704d8063
ccc2cfaccec62583817f3d95e18346e8a
ccc93356e3ad9003d1725308e7d2d6562
ccce55b480db497863b3e5f944407010a
ccf421f006856c4ce6ad248c25668912e
.cctor
cd1ec2a7554b7872386be51f3515243e7
cd1fbbe10e834e4d2d299bd4f01d405eb
cd48c32b6b4b1563a23b458c72481ac78
cd4d7fd70c4b9e564420e296fbad11efd
cd626dd4a5f2c2bd429b4c02f353a3425
cd649958e92f3fc0fcb4532a01a9057e4
cd737ecead2ae9a5812d5e1d6408fc822
cda12c3c8650a9b9e9cd2e6b271208471
cda942f59c023b68e4afa881ed4a2b232
cda9c54ba6aa446f2615dda5a9ec6f2bc
cdaa548fe0334c32e5c38aca47a8b2a40
cdaeb3914dc80ab7ce51a1dba63a392cf
cdb140312c77862c0e78dbf21f4f3b305
cdbab958831a94b59aeab3ed475e88c23
cdc18a9e568d621a66c75b63ba6b8e9b1
cdc525f8b17928cc43be53b9646bebf1e
cdc8281d01054a2aeae75ebf8afa192d6
cdd07b1bd25ea5393c73c8aed92161c47
cdd557e4944764698464fa1f538ce913f
cdd92255d24a476e46ca24141f0347e5c
cddcf7555e84edf9c1eb1b7a943863674
cddf5f2f6b58e9149a92293096a2462fa
cde251759db8ff55ad5619dd3309d481d
cde2b3c125ae4b09c660f0ece81379d43
cdea56ebecb8184f0a52a6d39f8ad71cf
ce02310c6016ee7b714f6eaf6951b1a3c
ce02a9ba77cca9a2c43779faab212ea6f
ce046c54789d17896ebeab7119c9ee10e
ce074f7c4c9ad5e333fad0fb71f21e2f1
ce0883d47404057aacf7ea5c739f0a6ea
ce0d49daf26985cd98b7c5ff6a7cec877
ce10d709c73d8627b90f7120ac7dec79f
ce1c14563fedcc856cd5039ab26697b07
ce1d9c704b838288d16672edb8c5f9213
ce27294915e672d091209c82ced9e3bf7
ce2867c7968396daf9dd0d671d64b2384
ce441c78b1a673497b52d875a196f9b96
ce4710175ca2e5ac9771dbad986595742
ce5e3fee3a54374d675d59ea67eca987b
ce61e78e46e2db1f824b214b28bedf2db
ce71928a22eeaf20c32d77f3b7a662e13
ce82f48870ac2a46c5725743f9c8dfabb
ce8bcc8fe7094c638200614ad662e01ac
ce95d5902ac54c220274422bb8f5c0faa
ceaadaeb6c941d777d68f39b9cd155fae
ceabccde0f46c99ff9a0f715ec72fe1c8
ceadccc2af7577aee03701c7ba909dad7
cebed5b839717e90aee14402140a0d1ac
cec4164e73efde1b5c0f3973fb4e50ab3
ced751dc8c246d8dd4b02d5532192fac9
cedfa6ff0b40e71f39a54d28390af0359
ceef5225588f208a5827b0ae8fedd9b66
cef346059d13381b5d41275fe6bec6025
cef8f417bbee5e69c0930101d26a9c968
Ceiling
cf1714e8adbab187028b37eb44276388f
cf1c657c4006d9dd20ad7f42c48681ac0
cf4d7a2f01d67bc4af7b5e923d1b4395d
cf6c4ea84b19dae6b3e2b15d04482f115
cf73383892b25f7d93b6cdda930d477fc
cf80837b68e464e3fa5e0bee9bc10ddd6
cfa3e5df1b581b3bd60fbf1b52f9d80a3
cfb34633b04cfaa0661b3a18239938550
cfbf9858aa463cdae3c20bf93cc85280d
cfd0a5aa218623a935603bd432a2c7b38
cfd8774a99f2147a9f0ce66c3625683cc
cfe2b4692923cb0ba9d8bb3f556c3ef62
cfeef1f9ccccaa0f21bad31ec7fe44418
cff60416ca44f38b1a24cf4fff3f3615d
cffa8aac58795cea57a8fed31b727526b
CipherMode
ClearProjectError
CloseHandle
Compare
  </compatibility>
            compatibility then delete the requestedExecutionLevel node.
  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
CompilationRelaxationsAttribute
CompilerGeneratedAttribute
Component
CompressionMode
Computer
ComVisibleAttribute
Concat
ConcatenateObject
ConditionalCompareObjectEqual
ConditionalCompareObjectGreater
ConsoleApplicationBase
ConstructorInfo
ContainerControl
Contains
ContainsKey
Control
Conversion
Conversions
Convert
CopyFile
_CorExeMain
Create
CreateDecryptor
CreateDelegate
CreateDirectory
CreateInstance
Create__Instance__
CreateObject
CryptoStream
CryptoStreamMode
Culture
CultureInfo
CurrentUser
C:\WebServers\home\pirogi.ru\test\podmena\Downloader\WindowsApplication17\obj\x86\Release\WinRAR.pdb
DebuggableAttribute
Debugger
DebuggerHiddenAttribute
DebuggerNonUserCodeAttribute
DebuggerStepThroughAttribute
DebuggingModes
debugPort
Default
defaultInstance
DeflateStream
Delegate
  <!-- <dependency>
  </dependency>-->
    </dependentAssembly>
    <dependentAssembly>
DESCryptoServiceProvider
DesignerGeneratedAttribute
$dfb1a8ae-91d9-4f16-a410-bd32fa3d83e4
Dictionary`2
Directory
Dispose
Dispose__Instance__
disposing
Double
DownloadFile
DynamicILInfo
DynamicMethod
EditorBrowsableAttribute
EditorBrowsableState
  <!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
Encoding
EndApp
EndInvoke
Environment
Equals
EventArgs
EventHandler
Exception
ExceptionHandlingClauseOptions
Exists
FieldInfo
FileSystemProxy
Format
FromBase64String
GeneratedCodeAttribute
GetAllNetworkInterfaces
get_ASCII
get_Assembly
get_BaseDirectory
GetBytes
get_c0c09f8815085447584ce6d50a36c5cf2
get_c5178ea1bbb20a9419b4c4559ce2c03a3
get_c546ec68f75f528a9bf23686b375a7703
get_c882979633254a547d2c7c3f0ecd4f9de
get_ca4bbdb3f90849f16d3d48cd29e228173
get_Capacity
get_cb77c3af13e43232eb0b7e1b33b0d5721
get_cfb34633b04cfaa0661b3a18239938550
get_cfeef1f9ccccaa0f21bad31ec7fe44418
get_Chars
GetClassName
get_Culture
get_Current
get_CurrentDomain
GetCurrentProcessId
get_DeclaringType
get_Default
GetDynamicILInfo
GetEnumerator
GetEnvironmentVariable
get_ExecutablePath
GetExecutingAssembly
get_FieldHandle
GetFields
get_FieldType
get_FileName
get_FileSystem
get_FullName
GetGenericArguments
GetHashCode
GetILGenerator
get_InnerException
get_InputBlockSize
get_IsAttached
get_IsDisposed
get_IsFamilyOrAssembly
get_IsPinned
get_IsStatic
get_IsValueType
get_Item
get_Length
get_LocalType
get_LocalVariables
GetLocalVarSigHelper
GetManifestResourceStream
get_MemberType
get_Message
GetMethodBody
GetMethodFromHandle
get_MethodHandle
get_Module
get_ModuleHandle
get_Modules
GetModules
get_Name
get_Network
GetObject
GetObjectValue
get_OperandType
get_OutputBlockSize
GetParameters
get_ParameterType
GetPhysicalAddress
get_Position
GetProcAddress
GetProcesses
get_ProcessorCount
GetPropertyValue
get_ResourceManager
GetResourceString
GetResponse
GetResponseStream
get_ReturnType
get_Settings
GetSignature
get_Size
get_StartupPath
GetString
GetTokenFor
GetTypeFromHandle
get_TypeHandle
get_Unicode
get_UTF8
get_Value
GetValue
GuidAttribute
Hashtable
HelpKeywordAttribute
HideModuleNameAttribute
HostProtectionException
hProcess
HttpUtility
IAsyncResult
IContainer
ICryptoTransform
IDisposable
IEnumerable
IEnumerable`1
IEnumerator
IEnumerator`1
      <!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
      <!-- If your application is designed to work with Windows 8, uncomment the following supportedOS node-->
      <!-- If your application is designed to work with Windows Vista, uncomment the following supportedOS node-->
            If you want to change the Windows User Account Control level replace the 
            If you want to utilize File and Registry Virtualization for backward 
ILGenerator
IList`1
IndexOf
Interaction
Intern
IntPtr
InvalidOperationException
Invoke
Ip`~sU
IsNullOrEmpty
kernel32.dll
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
          language="*"
LateGet
LateSetComplex
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
LoadLibrary
LocalVariableInfo
lParam
lpEnumFunc
lpOutputString
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
MakeByRefType
ManagementBaseObject
ManagementException
ManagementObject
ManagementObjectCollection
ManagementObjectEnumerator
ManagementObjectSearcher
MemberInfo
MemberTypes
MemoryStream
method
MethodBase
MethodBody
MethodInfo
Microsoft.VisualBasic
Microsoft.VisualBasic.ApplicationServices
Microsoft.VisualBasic.CompilerServices
Microsoft.VisualBasic.Devices
Microsoft.VisualBasic.MyServices
Microsoft.Win32
Module
<Module>
ModuleHandle
Monitor
MoveNext
mscoree.dll
mscorlib
MulticastDelegate
My.Application
My.Computer
My.Forms
MyGroupCollectionAttribute
My.MyProject.Forms
MySettings
My.Settings
MyTemplate
My.User
My.WebServices
          name="Microsoft.Windows.Common-Controls"
Network
NetworkInterface
NewLateBinding
Newobj
NotSupportedException
NumberStyles
object
Object
OpCode
OpCodes
OpenProcess
OpenSubKey
OperandType
Operators
op_Inequality
PADPADP
ParameterInfo
PasswordDeriveBytes
pbDebuggerPresent
PhysicalAddress
Process
ProcessHandle
ProcessInformation
ProcessInformationClass
ProcessInformationLength
ProcessModule
ProcessModuleCollection
          processorArchitecture="*"
ProjectData
          publicKeyToken="6595b64144ccf1df"
ReadByte
ReadInt32
ReadToEnd
ReferenceEquals
Registry
RegistryKey
`.reloc
Remove
Replace
        <requestedExecutionLevel  level="asInvoker" uiAccess="false" />
        <requestedExecutionLevel level="asInvoker" uiAccess="false" />
        <requestedExecutionLevel  level="highestAvailable" uiAccess="false" />
        <requestedExecutionLevel  level="requireAdministrator" uiAccess="false" />
            requestedExecutionLevel node with one of the following.
      </requestedPrivileges>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
ResolveField
ResolveMember
ResolveMethod
ResolveMethodHandle
ResolveSignature
ResolveString
ResolveType
ResolveTypeHandle
ResourceManager
result
ResumeLayout
ReturnLength
Reverse
RijndaelManaged
RuntimeCompatibilityAttribute
RuntimeFieldHandle
RuntimeHelpers
RuntimeMethodHandle
RuntimeTypeHandle
    </security>
    <security>
ServerComputer
set_AutoScaleDimensions
set_AutoScaleMode
set_Capacity
set_cfeef1f9ccccaa0f21bad31ec7fe44418
set_ClientSize
SetCode
set_Culture
SetExceptions
set_Item
set_IV
set_Key
SetLastError
SetLocalSignature
set_Mode
set_Name
set_Position
SetProjectError
set_ShowIcon
set_ShowInTaskbar
set_Text
Settings
SettingsBase
SetValue
set_Visible
SignatureHelper
Single
            Specifying requestedExecutionLevel node will disable file and registry virtualization.
StandardModuleAttribute
STAThreadAttribute
Stream
StreamReader
String
StringBuilder
#Strings
Substring
SubtractObject
      <!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
      <!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>-->
      <!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>-->
SuppressIldasmAttribute
SuspendLayout
SymmetricAlgorithm
Synchronized
System
System.CodeDom.Compiler
System.Collections
System.Collections.Generic
System.ComponentModel
System.ComponentModel.Design
System.Configuration
System.Diagnostics
System.Drawing
System.Globalization
System.IO
System.IO.Compression
System.Management
System.Net
System.Net.NetworkInformation
System.Reflection
System.Reflection.Emit
System.Resources
System.Runtime.CompilerServices
System.Runtime.InteropServices
System.Security
System.Security.Cryptography
System.Text
System.Threading
System.Web
System.Windows.Forms
System.Windows.Forms.Form
TargetInvocationException
!This program cannot be run in DOS mode.
Thread
ThreadStaticAttribute
ToArray
ToBoolean
ToDouble
ToInt32
ToInt64
ToLong
ToSingle
ToString
TransformBlock
TransformFinalBlock
  </trustInfo>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
TryGetValue
          type="win32"
        <!-- UAC Manifest Options
UInt16
UInt32
UIntPtr
UrlEncode
user32.dll
v2.0.50727
VBMath
          version="6.0.0.0"
WebRequest
WebResponse
      Windows will automatically select the most compatible environment.-->
WinRAR
WinRAR$
WinRAR%
WinRAR.exe
WrapNonExceptionThrows
X3t.g4?j
xg#@qFb
<?xml version="1.0" encoding="utf-8"?>
yHBL>e
Zip.My
Zip.Resources.resources